Conrad Kramer
86a60371d6
Add standalone TestFlight retry job
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Build Rust / Cargo Test (push) Has been cancelled
2026-06-07 19:01:31 -07:00
Conrad Kramer
a075f5ca34
Allow TestFlight distribution retries
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Build Rust / Cargo Test (push) Has been cancelled
2026-06-07 18:59:29 -07:00
Conrad Kramer
2410de5e51
Extend TestFlight processing wait
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Build Rust / Cargo Test (push) Has been cancelled
2026-06-07 18:58:31 -07:00
Conrad Kramer
dd7dc89341
Route public release storage domains
Cache: Publish Nix / Publish Nix Cache (push) Successful in 3m19s
Build Rust / Cargo Test (push) Successful in 4m1s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 18:37:47 -07:00
Conrad Kramer
b06244e88c
Disable optional AWS checksums for Garage uploads
Build Rust / Cargo Test (push) Successful in 4m3s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 17:43:04 -07:00
Conrad Kramer
640d4693ac
Sign Sparkle appcasts in Python
Cache: Publish Nix / Publish Nix Cache (push) Successful in 3m4s
Build Rust / Cargo Test (push) Successful in 4m5s
Build Site / Next.js Build (push) Failing after 4s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 16:56:18 -07:00
Conrad Kramer
1ef6fedeaf
Seal Burrow Sparkle release key
Build Rust / Cargo Test (push) Successful in 4m2s
Build Site / Next.js Build (push) Failing after 4s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 16:35:07 -07:00
Conrad Kramer
1d45016a63
Use Sparkle signer for full appcasts
Build Rust / Cargo Test (push) Successful in 4m1s
Build Site / Next.js Build (push) Failing after 5s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 16:13:53 -07:00
Conrad Kramer
a84922f4f3
Fix rcodesign notary key output
Build Rust / Cargo Test (push) Successful in 4m2s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 15:53:15 -07:00
Conrad Kramer
4f765df2a9
Handle raw Google KMS signatures
Build Rust / Cargo Test (push) Successful in 4m2s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 15:34:24 -07:00
Conrad Kramer
6867f26f19
Accept Developer ID G2 certificates
Build Rust / Cargo Test (push) Successful in 4m1s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 15:16:01 -07:00
Conrad Kramer
e5da3016ea
Avoid project config during WIF auth
Build Rust / Cargo Test (push) Successful in 4m3s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 14:47:31 -07:00
Conrad Kramer
65809da33a
Map WIF runner client from audience
Build Rust / Cargo Test (push) Successful in 4m1s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 14:15:59 -07:00
Conrad Kramer
5276b57c4d
Fix WIF provider groups mapping
Build Rust / Cargo Test (push) Successful in 4m1s
Build Site / Next.js Build (push) Failing after 5s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 13:54:02 -07:00
Conrad Kramer
51f34c9a64
Use client-only WIF runner grants
Build Rust / Cargo Test (push) Successful in 4m0s
Build Site / Next.js Build (push) Failing after 4s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 6s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 13:34:53 -07:00
Conrad Kramer
e7c0442a12
Fix Authentik WIF client credentials
Cache: Publish Nix / Publish Nix Cache (push) Successful in 2m46s
Build Rust / Cargo Test (push) Successful in 4m1s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 13:07:34 -07:00
Conrad Kramer
8180c3c35a
Fix Authentik WIF token endpoint
Build Rust / Cargo Test (push) Successful in 4m8s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 12:33:39 -07:00
Conrad Kramer
5ef4fdef64
Remove Python dependency from secret decrypt
Build Rust / Cargo Test (push) Successful in 3m59s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 12:13:20 -07:00
Conrad Kramer
ef7023f9be
Prefer age for release secret decrypt
Cache: Publish Nix / Publish Nix Cache (push) Has been cancelled
Build Rust / Cargo Test (push) Successful in 4m0s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 11:56:04 -07:00
Conrad Kramer
83da429854
Make release secret decrypt find Nix tools
Cache: Publish Nix / Publish Nix Cache (push) Successful in 3m6s
Build Rust / Cargo Test (push) Successful in 4m2s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 11:35:37 -07:00
Conrad Kramer
ec407be894
Use Forgejo-compatible artifact actions
Build Rust / Cargo Test (push) Successful in 4m1s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 10:57:05 -07:00
Conrad Kramer
ddbfa47587
Pass Apple Rust build tools into Bazel actions
Build Rust / Cargo Test (push) Successful in 4m5s
Build Site / Next.js Build (push) Failing after 6s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 10:45:30 -07:00
Conrad Kramer
5150faad99
Move macOS Bazel cache outside checkout
Build: Android / Android Rust Core Stub (push) Failing after 22s
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Build Rust / Cargo Test (push) Has been cancelled
2026-06-07 10:34:44 -07:00
Conrad Kramer
8e95014840
Fix CI toolchain selection
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Cache: Publish Nix / Publish Nix Cache (push) Failing after 20s
Build Rust / Cargo Test (push) Has been cancelled
2026-06-07 10:26:14 -07:00
Conrad Kramer
06375ba328
Skip Namespace remote cache probe on macOS
Build Rust / Cargo Test (push) Successful in 4m1s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
Build: Android / Android Rust Core Stub (push) Failing after 23s
2026-06-07 10:03:09 -07:00
Conrad Kramer
4a1ea9b471
Run Apple cache setup outside Nix shell
Build Rust / Cargo Test (push) Successful in 4m0s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 09:57:54 -07:00
Conrad Kramer
2da04bc317
Make Namespace cache setup fail open
Build: Android / Android Rust Core Stub (push) Failing after 22s
Build Rust / Cargo Test (push) Successful in 4m3s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 09:51:35 -07:00
Conrad Kramer
dba641035b
Guard macOS Namespace fallback retries
Cache: Publish Nix / Publish Nix Cache (push) Failing after 21s
Build Rust / Cargo Test (push) Successful in 5m44s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 09:27:23 -07:00
Conrad Kramer
e882a16dad
Move Apple tester workflow to fresh runner labels
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Build Rust / Cargo Test (push) Successful in 5m51s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 09:12:37 -07:00
Conrad Kramer
4f8d58965b
Extend Namespace dispatcher timeout
Build Rust / Cargo Test (push) Successful in 5m47s
Cache: Publish Nix / Publish Nix Cache (push) Failing after 20s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 09:05:05 -07:00
Conrad Kramer
4d7c19e593
Wait for Namespace runner terminal state
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Build Rust / Cargo Test (push) Successful in 5m47s
Build Site / Next.js Build (push) Failing after 4s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 08:57:28 -07:00
Conrad Kramer
de32d8390e
Use repo-built Forgejo Namespace services
Cache: Publish Nix / Publish Nix Cache (push) Failing after 26s
Build Rust / Cargo Test (push) Successful in 5m50s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 08:48:05 -07:00
Conrad Kramer
6b9065008d
Use writable macOS runner workdir
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Build Rust / Cargo Test (push) Successful in 4m42s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 08:42:45 -07:00
Conrad Kramer
4e31d54a45
Make version helper CI-safe
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Build Rust / Cargo Test (push) Has been cancelled
2026-06-07 08:39:00 -07:00
Conrad Kramer
0a35d62e14
Fix Namespace macOS runner shape
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Cache: Publish Nix / Publish Nix Cache (push) Failing after 22s
Build Rust / Cargo Test (push) Has been cancelled
2026-06-07 08:35:26 -07:00
Conrad Kramer
a4db952d3f
Fix Namespace Apple runner dispatch
Build Rust / Cargo Test (push) Successful in 4m15s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
Cache: Publish Nix / Publish Nix Cache (push) Failing after 20s
2026-06-07 08:26:23 -07:00
Conrad Kramer
212b129c31
Add focused Apple tester distribution workflow
Build Rust / Cargo Test (push) Successful in 4m0s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 07:52:30 -07:00
Conrad Kramer
126af6b5cf
Wire Apple KMS release signing
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Build Rust / Cargo Test (push) Successful in 11m0s
Build Site / Next.js Build (push) Failing after 5s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 07:28:48 -07:00
Conrad Kramer
ed73d7d16a
Fix Nix cache bootstrap command
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Build Rust / Cargo Test (push) Successful in 4m40s
Build Site / Next.js Build (push) Failing after 6s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 06:03:14 -07:00
Conrad Kramer
0faaa806b6
Fix Forge Namespace runner scope
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Build Rust / Cargo Test (push) Has started running
Build Site / Next.js Build (push) Failing after 6s
Lint Governance / BEP Metadata (push) Successful in 1s
2026-06-07 05:58:28 -07:00
Conrad Kramer
002bd382e9
Wire Forge-native release infrastructure
Cache: Publish Nix / Publish Nix Cache (push) Waiting to run
Build Rust / Cargo Test (push) Successful in 4m14s
Build Site / Next.js Build (push) Failing after 6s
Infra: OpenTofu / OpenTofu (grafana) (push) Successful in 5s
Lint Governance / BEP Metadata (push) Successful in 0s
Build: Android / Android Rust Core Stub (push) Failing after 23s
2026-06-07 05:51:12 -07:00
Conrad Kramer
97c569fb35
Align GTK app with Apple home surface
...
Build Rust / Cargo Test (push) Successful in 3m50s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
Add the GTK home screen, local account store, daemon gRPC wrapper, and embedded Linux daemon startup path so the Linux app follows the Apple client UX and daemon boundary.
Document the GTK parity expectations and update the daemon IPC and Tailnet BEPs with the cross-platform client model.
2026-05-03 17:36:55 -07:00
Conrad Kramer
9244a0476a
Fix Zulip SAML provisioning
2026-04-19 14:48:16 -07:00
Conrad Kramer
7540110713
Wait for Zulip supervisor before nginx patching
2026-04-19 14:09:26 -07:00
Conrad Kramer
836ccc93cd
Patch Zulip uwsgi scheme at runtime
2026-04-19 14:04:42 -07:00
Conrad Kramer
6cd0f3b1ae
Fix Zulip SAML callback scheme handling
2026-04-19 13:59:01 -07:00
Conrad Kramer
eb9327a99f
Map Burrow admins to Zulip owners
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
Build Rust / Cargo Test (push) Successful in 4m2s
2026-04-19 03:43:57 -07:00
Conrad Kramer
5598fc18fc
Enable Zulip SAML auto signup
2026-04-19 03:37:42 -07:00
Conrad Kramer
78d83c5079
Pin Zulip SAML ACS to https
Build Rust / Cargo Test (push) Successful in 3m55s
Build Site / Next.js Build (push) Failing after 2s
Lint Governance / BEP Metadata (push) Successful in 0s
2026-04-19 01:49:25 -07:00
Conrad Kramer
4c3dcdd17b
Force https-only Zulip SAML login
2026-04-19 01:43:43 -07:00